On Wed, 16 Sep 2026 08:20:32 GMT, Hai-May Chao <[email protected]> wrote:

>> This is to add support in SunJSSE for the TLS 1.3 ML-DSA signature schemes: 
>> mldsa44, mldsa65, and mldsa87.
>> 
>> ---------
>> - [x] I confirm that I make this contribution in accordance with the 
>> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai).
>
> Hai-May Chao has updated the pull request incrementally with three additional 
> commits since the last revision:
> 
>  - Tests update with Artur's comments
>  - Revert change to TLSCurveMismatch.java
>  - Revert change to CertificateMessage.java

test/jdk/sun/security/ssl/SignatureScheme/MLDSACertSignSchemeConstraint.java 
line 29:

> 27:  * @summary Test when signature_algorithms permits ML-DSA handshake
> 28:  *          signatures but certificate-signature constraints accept
> 29:  *          or reject RSA signed and ML-DSA signed certificate chains

We now test both CertificateSignature and HandshakeSignature constraints. I 
think we need to update the test description accordingly.

test/jdk/sun/security/ssl/SignatureScheme/MLDSACertSignSchemeConstraint.java 
line 142:

> 140:             if (expectFail) {
> 141:                 throw new RuntimeException(
> 142:                         "Expected SSLHandshakeException was not thrown");

s/SSLHandshakeException/SSLException/

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/32529#discussion_r4027705738
PR Review Comment: https://git.openjdk.org/jdk/pull/32529#discussion_r4027718078

Reply via email to